runnerty

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

runnerty records in CISA KEV

No runnerty vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-74135 CVE-2026-110641 · GHSA-2v4p-6p6r-gr94

OS command injection in @runnerty/executor-decompress via file names

MEDIUM 44

@runnerty/executor-decompress through 3.1.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted archive file names to compress_file.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.02515 Published 2026-10-14 No fix listed CWE-78

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0